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NEW BILL ACCEPTOR IS INSTALLED 
AND THE SYSTEM IS POWERED UP 



22 



AUTHORIZED INSTALLER ENABLES THE 
SPECIAL SECURED SETUP MODE 



24- 



THE TRANSACTION CONTROLLER 
REQUESTS THE BILL ACCEPTOR'S 
UNIQUE MASTER KEY (MSG #11) 



26- 



TRANSACTION CONTROLLER RECEIVES THE 
BILL ACCEPTOR'S MASTER KEY (MSG #121) 
AND SAVES IT IN NON VOLATILE RAM 



27 



TRANSACTION CONTROLLER 

SENDS THE INITIAL 
CERTIFICATION KEY (MSG #09) 
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EXIT SPECIAL SETUP 
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TRANSACTION CONTROLLER ENABLES BILL 
ACCEPTOR TO ACCEPT DOCUMENTS 
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TRANSACTION CONTROLLER 
ENABLES THE BILL ACCEPTOR 



31 



USER INSERTS A BILL 



32 



BILL ACCEPTOR ENCRYPTS THE 
ESCROW MESSAGE AND 
SENDS IT (MSG #1) 
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TRANSACTION CONTROLLER 
DECRYPTS THE ESCROW MESSAGE 



RETURN 
MESSAGE IF 
REQUIRED 
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DATA INTEGRITY 
CHECKSUM OK ? 



.NO 



UNAUTHORIZED 
UNIT DETECTED 
ISSUES WARNING 



YES 
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TRANSACTION CONTROLLER SENDS A 
STACK CMD. (MSG #114) 
(CONTAINING A NEW CERTIFICATION KEY) 



I 



37 



BILL ACCEPTOR STORES THE BILL AND SENDS THE 
ENCRYPTED STACKED MESSAGE (MSG | #3) NOTE: 
THE BILL ACCEPTOR USED THE CERT RCATION 
KEY JUST RECEIVED IN THE "STACK" MESSAGE 
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V 



W DATA INTEGRITY 
\CHECKSUM OK? 



NO 



UNAUTHORIZED 
UNIT DETECTED 



YES 
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TRANSACTION CONTROLLER 
ISSUES CREDIT 



FIG. 3 
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TRANSACTION CONTROLLER REQUESTS A 
MASTER-KEY FROM THE BILL ACCEPTOR 
DURING THE SETUP PROCESS 
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TRANSACTION CONTROLLER TRANSMITS 

A CERTIFICATION-KEY TO THE BILL 
ACCEPTOR DURING THE SETUP PROCESS 
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BILL ACCEPTOR FORMATS A TRANSACTION 
MESSAGE BASED ON AN EVENT 
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BILL ACCEPTOR RETRIEVES STORED 
MASTER-KEY AND CERTIFICATION-KEY 



45« 



BILL ACCEPTOR GENERATES A ENCRYPTED 
TRANSACTION MESSAGE BASED ON XOR 
OF TRANSACTION MESSAGE AND THE 
MASTER-KEY AND CERTIFICATION-KEY 
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BILL ACCEPTOR TRANSMITS THE 
ENCRYPTED TRANSACTION MESSAGE 
TO THE TRANSACTION CONTROLLER 



47- 



TRANSACTION CONTROLLER DECRYPTS THE 
ENCRYPTED TRANSACTION MESSAGE BASED 
ON THE MASTER-KEY AND CERTIFICATION-KEY 



48- 



TRANSACTION CONTROLLER VERIFIES 
THE CHECKSUM OF THE DECRYPTED 
TRANSACTION MESSAGE 
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TRANSACTION CONTROLLER TAKES 
APPROPRIATE ACTION BASED ON THE 
RESULTS OF THE CHECKSUM 



FIG. 4 
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TRANSACTION CONTROLLER TRANSMITS A 
CERTIFICATION-KEY TO THE BILL ACCEPTOR 
DURING THE SETUP PROCESS 
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BILL ACCEPTOR GENERATES A PUBLIC-KEY 
AND A PRIVATE KEY 
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BILL ACCEPTOR TRANSMITS THE PUBLIC 
KEY TO THE TRANSACTION CONTROLLER 
DURING THE SETUP PROCESS 
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BILL ACCEPTOR FORMATS A TRANSACTION 
MESSAGE BASED ON AN EVENT 
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BILL ACCEPTOR GENERATES A ENCRYPTED 
TRANSACTION MESSAGE BASED ON 
THE TRANSACTION MESSAGE, THE 

CERTIFICATION-KEY, AND THE PRIVATE KEY 
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BILL ACCEPTOR TRANSMITS THE 
ENCRYPTED TRANSACTION MESSAGE 
TO THE TRANSACTION CONTROLLER 



57 



TRANSACTION CONTROLLER DECRYPTS 
THE ENCRYPTED TRANSACTION 
MESSAGE BASED ON THE PUBLIC KEY 



58- 



TRANSACTION CONTROLLER VERIFIES 
THE AUTHENTICITY AND INTEGRITY OF 
THE ENCRYPTED TRANSACTION MESSAGE 
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TRANSACTION CONTROLLER TAKES 
APPROPRIATE ACTION BASED ON THE 
RESULTS OF THE VERIFICATION 



FIG. 5 
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BILL ACCEPTOR USES A PSEUDO-RANDOM- 
GENERATOR WITH AN INITIAL SEED VALUE 
TO GENERATE A FIRST CERTIFICATION-KEY 



62 



BILL ACCEPTOR TRANSMITS THE INITIAL SEED 
VALUE TO THE TRANSACTION CONTROLLER 
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TRANSACTION CONTROLLER USES THE 

INITIAL SEED VALUE AND FEDS IT TO 
THE PSEUDO-RANDOM-GENERATOR TO 
GENERATE A SECOND CERTIFICATION-KEY 
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BILL ACCEPTOR ENCRYPTS THE TRANSACTION 
MESSAGE BASED ON THE RANDOM 
GENERATED FIRST CERTIFICATION-KEY 
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BILL ACCEPTOR TRANSMITS THE 
ENCRYPTED TRANSACTION MESSAGE 
TO THE TRANSACTION CONTROLLER 
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TRANSACTION CONTROLLER DECRYPTS 
THE TRANSACTION MESSAGE USING THE 
SECOND CERTIFICATION-KEY GENERATED 
AT THE TRANSACTION CONTROLLER 
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TRANSACTION CONTROLLER AUTHENTICATES 
THE DECRYPTED MESSAGE BY COMPARING 
THE FIRST CERTIFICATION-KEY OBTAINED FROM 
THE DECRYPTED TRANSACTION MESSAGE WITH 

THE SECOND CERTIFICATION-KEY RANDOMLY 
GENERATED AT THE TRANSACTION CONTROLLER 
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TRANSACTION CONTROLLER TAKES 
APPROPRIATE ACTION BASED ON 
THE RESULTS OF AUTHENTICATION 



FIG. 6 
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71 



BA GENERATES A CURRENT- 
KEY AND A FUTURE-KEY 
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BILL ACCEPTOR TRAf 
KEY TO THE TRANSA 


>JSMITS THE FUTURE- 
CTION CONTROLLER 
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TRANSACTION CONTROLLER STORES THE 

FUTURE-KEY TO BE USED WHENEVER 
DECRYPTING A TRANSACTION MESSAGE 
RECEIVED FROM THE BILL ACCEPTOR 
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BILL ACCEPTOR ENCRYPTS 
TRANSACTION MESSAGE BASED ON 
THE FUTURE-KEY AND CURRENT-KEY 
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BILL ACCEPTOR TRANSMITS THE 
ENCRYPTED TRANSACTION MESSAGE 
TO THE TRANSACTION CONTROLLER 
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1 

TRANSACTION CON! 
THE PREVIOUSLY S" 


r 

•ROLLER RETRIEVES 
rORED FUTURE-KEY 
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TRANSACTION CONTROLLER DECRYPTS 
THE TRANSACTION MESSAGE 
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TRANSACTION CONTROLLER AUTHENTICATES 
THE DECRYPTED MESSAGE BY COMPARING 

THE CURRENT-KEY OBTAINED FROM THE 
MESSAGE WITH THE RETRIVED FUTURE-KEY 
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TRANSACTION CONTROLLER STORES THE 
FUTURE-KEY OBTAINED FROM THE TRANSACTION 
MESSAGE TO BE USED WHENEVER 
DECRYPTING A SUBSEQUENT TRANSACTION 



FIG. 7 



